6692ab4eaf274fdd6035d08aaf2f6a59_JaffaCakes118 | Triage

Sharing

General

Target

6692ab4eaf274fdd6035d08aaf2f6a59_JaffaCakes118
Size

272KB
MD5

6692ab4eaf274fdd6035d08aaf2f6a59
SHA1

75510d357627b8658aab57a64208a63cec26be55
SHA256

c312da39369641445edfaf1ef66cdbc61d8618fe5f1684fc973519a36a332cc7
SHA512

9763e72ef0058e802250b52db989d2cf5d1ec05c9739bfb2829bceadaebf669dcf704d6c6a13bc73d2e45e00a66c418f56b786e6838329845dbb7eb4282b2bf2
SSDEEP

3072:Lmhbh9A1BwdoF0F32x+Zx1h6VKvxgdcXOTeeEQzhRRecHZqTYPInXzuBABGN3Wh1:03yFF0V2QZviufXOT9EEgF6BOi3WhYM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6692ab4eaf274fdd6035d08aaf2f6a59_JaffaCakes118

Files

6692ab4eaf274fdd6035d08aaf2f6a59_JaffaCakes118
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ